Threat Intelligence Brief
Curated summary with source attribution
Source: amnestykenya.org
Threat Risk: High
Victim: Kenyan Government
Incident: Repeated compromise and defacement of government websites, including the presidential portal and the eCitizen platform.
Impact: Temporary loss of critical public services, potential data exfiltration, and significant reputational damage.
Attacker: Anonymous Sudan and unidentified threat actors
Analysis: Kenyan government entities are suffering from a systemic failure in cybersecurity governance, leading to multiple defacements and ransomware attempts. The recurrence of these attacks suggests a lack of remediation after initial breaches and a failure to implement basic security policies like business continuity plans. The persistent use of unauthorized private emails for official business further expands the state’s attack surface.
Recommendations: Implement and enforce a mandatory government-wide ICT security policy and steering committee.; Establish redundant backup sites and a verified business continuity plan for critical services.; Strictly prohibit and audit the use of private email accounts for official government correspondence.
Source: Amnesty Kenya
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source